signer

Sep 27, 2024 GO-2025-3381 +1 more

  GO-2025-3381: notation-go's timestamp signature generation lacks certificate revocation check in github.com/notaryproject/notation-go

  GO-2025-3382: notation-go has an OS error when setting CRL cache leads to denial of signature verification in github.com/notaryproject/notation-go

Sep 5, 2024 GO-2025-3381

  GO-2025-3381: notation-go's timestamp signature generation lacks certificate revocation check in github.com/notaryproject/notation-go

Aug 28, 2024 GO-2025-3381

  GO-2025-3381: notation-go's timestamp signature generation lacks certificate revocation check in github.com/notaryproject/notation-go

Changes in this version

+ type GenericSigner struct

+ func NewGenericSigner(key crypto.PrivateKey, certChain []*x509.Certificate) (*GenericSigner, error)

+ func NewGenericSignerFromFiles(keyPath, certChainPath string) (*GenericSigner, error)

+ func (s *GenericSigner) Sign(ctx context.Context, desc ocispec.Descriptor, opts notation.SignerSignOptions) ([]byte, *signature.SignerInfo, error)

+ type PluginSigner struct

+ func NewPluginSigner(plugin plugin.SignPlugin, keyID string, pluginConfig map[string]string) (*PluginSigner, error)

+ func (s *PluginSigner) PluginAnnotations() map[string]string

+ func (s *PluginSigner) Sign(ctx context.Context, desc ocispec.Descriptor, opts notation.SignerSignOptions) ([]byte, *signature.SignerInfo, error)

Aug 16, 2024 GO-2025-3381

  GO-2025-3381: notation-go's timestamp signature generation lacks certificate revocation check in github.com/notaryproject/notation-go

Jul 23, 2024 GO-2025-3381

  GO-2025-3381: notation-go's timestamp signature generation lacks certificate revocation check in github.com/notaryproject/notation-go

Jul 25, 2023

Changes in this version

+ func New(key crypto.PrivateKey, certChain []*x509.Certificate) (notation.Signer, error)

+ func NewFromFiles(keyPath, certChainPath string) (notation.Signer, error)

+ func NewFromPlugin(plugin plugin.SignPlugin, keyID string, pluginConfig map[string]string) (notation.Signer, error)

May 16, 2023 GO-2023-1832

  GO-2023-1832: Verification bypass in github.com/notaryproject/notation-go

Apr 22, 2023 GO-2023-1832

  GO-2023-1832: Verification bypass in github.com/notaryproject/notation-go

Feb 16, 2023 GO-2023-1832

  GO-2023-1832: Verification bypass in github.com/notaryproject/notation-go

Feb 16, 2023 GO-2023-1589 +1 more

  GO-2023-1589: Denial of service from memory exhaustion in github.com/notaryproject/notation-go

  GO-2023-1832: Verification bypass in github.com/notaryproject/notation-go

Dec 7, 2022 GO-2023-1589 +1 more

  GO-2023-1589: Denial of service from memory exhaustion in github.com/notaryproject/notation-go

  GO-2023-1832: Verification bypass in github.com/notaryproject/notation-go